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CONTROL UNIT AND ACCELERATION SENSOR SYSTEM 
Background Information 

The present invention is directed to a control unit and an acceleration sensor system 
according to the definition of the species in the independent patent claims. 

A control unit for actuating passenger protection means having an electronic safety switch is 
5 known from DE 100 57 916 C2, the safety switch, independently of a processor, releasing 
output stages as a function of a signal of an acceleration sensor system. As a function of this 
signal, the processor determines whether the output stages and thus the passenger protection 
means are actuated, thereby establishing a hardware-independent plausibility check and 
redundancy. 

10 Advantages of the Invention 

The control unit and the acceleration sensor system according to the present invention having 
the features of the independent patent claims have the advantage over the related art that the 
safety switch already analyzes the integrated acceleration signal, since the acceleration sensor 
system itself integrates the acceleration signal. For this purpose, an integrator, which 

15 integrates either one or multiple acceleration signals generated by the acceleration sensor 
system, is advantageously present in the acceleration sensor system. This has the advantage 
that the integrator may be omitted from the processor, i.e., the microcontroller in the control 
unit, thereby making a simpler design possible. Moreover, the safety switch may already 
analyze the integrated acceleration signal, thereby permitting a better analysis vis-a-vis the 

20 one acceleration signal. The presence of an integrator or a filter in the safety switch itself, for 
smoothing the acceleration signal, is also avoided. Primarily, it is thereby achieved that the 
plausibility for a possible crash may be determined with greater accuracy. If the one 
acceleration signal is analyzed by the safety switch, threshold values, with which the safety 
switch compares the signal, must be set as high as possible so. that momentary acceleration 

25 peaks do not result in the release of the output stages in the control unit. However, it is 
possible in the integrated acceleration signal to set the threshold values correspondingly 
lower in order to achieve a more accurate plausibility check so that in triggering events, 
which do not involve such a high acceleration signal, the output stages are still released. 
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Advantageous improvements of the control units qjid the acceleration sensor system recited in 
the independent patent claims are possible due to the measures and refinements listed in the 
dependent claims. 

It is particularly advantageous that the acceleration sensor system itself has an integrator and 
5 that this pre-processing is accommodated in one housing. In addition, high pass filtering may 
also be provided, which is implemented as either analog or digital. High pass filtering is 
advantageously present in order to compensate for a possible offset drift of the acceleration 
sensor system. For this purpose, a high pass filter of the first order having 1 Hz to 2 Hz may 
be connected downstream, for example. This may be useful when driving on gravel in 
10 particular. 

Drawing 

Exemplary embodiments of the present invention are illustrated in the drawing and explained 
in greater detail in the subsequent description. 


Fig. 1 shows a block diagram of the control unit according to the present invention, 

15 Fig. 2 shows a first block diagram of the acceleration sensor system, 

Fig. 3 shows a second block diagram of the acceleration sensor system, 

Fig. 4 shows a signal/time diagram, and 

Fig. 5 shows another signal/time diagram. 


Description of the Exemplary Embodiments 

20 Redundant analysis of sensor signals in airbag control units has always been carried out in 
order to achieve a high level of safety in the actuation of passenger protection means such as 
airbags, seatbelt tensioners, or roll bars. Previously, mechanical switches were predominantly 
used, which were situated in the current circuit to the output stages, for example, and 
completed this current circuit at a correspondingly high acceleration. However, electronic 

25 safety switches are also increasingly used. These electronic safety switches have electronic 
structures which enable the analysis of sensor signals. These electronic structures are 
therefore similar to a switching unit or arithmetic unit. 
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It is provided according to the present invention that the acceleration sensor systems already 
output integrated acceleration signals which the safety switch subsequently analyzes in 
parallel to the processor. The processor or microcontroller is saved the complex function of 
integrating the acceleration signals so that it may have a simpler design and, based on the 
5 integrated acceleration signals, the safety switch is able to analyze the sensor signals more 
accurately to determine whether or not a crash event exists. 

Figure 1 shows a block diagram of the control unit according to the present invention. An 
acceleration sensor system S, which is able to detect the acceleration at least in the vehicle 
longitudinal direction, is situated in the housing of control unit SG. It is possible that 

10 acceleration sensor system S may also detect accelerations in the vehicle transverse direction. 
For this purpose, sensor elements may be sensitive in the vehicle longitudinal direction and 
the vehicle transverse direction or angular thereto. Sensors which are acceleration-sensitive in 
the vehicle vertical direction may also be used. These could be installed in the B and/or Ca- 
pillar for rollover detection, for example. Sensor S is connected to a microcontroller |iC and 

15 an electronic safety switch SCON via a data output. Microcontroller |iC receives signals from 
an interface module IF via a second data input. Microcontroller ^iC is connected to an output 
stage module FLIC via a data output. 

Communication between the modules in control unit SG and processor |iC preferably takes 
place via the SPI (serial peripheral interface bus). This bus is configured as a master/slave 

20 bus, microcontroller [iC being the master and the connected modules being the slaves. The 
signals from interface module IF are sent not only to microcontroller p.C but also to a second 
data input of safety switch SCON. Safety switch SCON is connected to output stage module 
FLIC via a data output. Outside of control unit SG, a peripheral sensor PAS is connected to 
interface module IF. Only a single module PAS is shown here as an example; however, many 

25 more modules may be installed in the vehicle. Acceleration sensor system PAS, for example, 
may be situated in the B-pillar for side impact detection and also on the radiator grill as an 
upfront sensor. For the sake of simplicity, additional modules, which are also situated in 
control unit SG but are nonessential for the description of the present invention, are not 
shown. The triggering circuits for the individual airbags and seat belt tensioners as well as 

30 roll bars are then connected to output stage module FLIC. 

The function is as follows: 
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Accelerations, which the vehicle experiences due to an ac'cident, are measured via sensors S 
and PAS and these sensor signals are then output by sensors S and PAS as integrated 
acceleration signals. The sensor signals from sensors S and PAS are analyzed by processor 
\iC and safety module SCON, independently of one another. A complex triggering algorithm 
5 runs on processor jxC which, based on a signal analysis, determines whether and which 
restraining means are to be triggered. Parallel to this action, safety module SCON analyzes 
the sensor signals using straightforward, fixed threshold values. It is possible that a 
straightforward algorithm also runs on safety module SCON. Furthermore, it is possible that 
safety module SCON executes watchdog functions for processor |iC. However, these are not 

10 illustrated here. It is essential for the present invention that sensors S and PAS output 

integrated acceleration signals so that processor |iC does not have to carry out the integration 
itself and safety module SCON is able to carry out the threshold value comparison based on 
these integrated acceleration signals and is therefore able to carry out a more accurate 
plausibility check of a triggering decision by processor ^C. If safety module SCON 

15 recognizes this triggering event it releases output stage module FLIC so that, at a firing 

command of processor nC, the output stages may be completed and the igniting current may 
flow into the triggering circuits. 

In a first exemplary embodiment, Figure 2 illustrates the internal structure of sensors S and 
PAS. Sensor element 20 outputs signals to an amplifier 21 which amplifies these signals. 

20 Sensor element 20 may be a diaphragm or a finger structure. However, other concepts for 

detecting the acceleration are also possible. Amplifier 21 outputs the amplified sensor signal 
to an analog-to-digital converter 22. The analog-to-digital converter carries out a digitization 
of the sensor signal. This is subsequently digitally integrated in module 23. Electronic high 
pass filtering takes place in module 24. This high pass filtering is necessary in order to 

25 compensate for a possible offset drift of the sensor. In the absence of such a high pass, the 
sensor's offset drift could result in a triggering signal without a triggering event existing. 

In a second exemplary embodiment, Figure 3 illustrates the internal structure of sensors S and 
PAS according to the present invention. A sensor element 30, which corresponds to sensor 
element 20, is connected to an amplifier 31, which in turn corresponds to amplifier 21. The 
30 amplified output signal of amplifier 31 is integrated in an analog manner by an integrator 32 
and subsequently filtered through an analog high pass filter in a high pass filter 33 in order to 
eliminate the offset drift. The signal, processed in this way, is subsequently digitized in an 
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analog-to-digital converter 34 so that it is able to he directly output by sensor S or sensor 
PAS and analyzed by processor jaC and safety switch SCON. Additional hybrids between the 
examples from Figures 2 and 3 are possible. 

The sensor signal of sensors S and PAS in the event of a crash is explained in Figure 4 based 
5 on a first signal/time diagram. The time is shown on the abscissa and the signal is shown on 
the ordinate in arbitrary units. In this instance it is a 30 km/h crash with a pole. Curve 40 
represents the integrated acceleration signal, while curve 41 is the derived integrated signal 
and curve 42 is the original acceleration signal which, however, has been filtered through a 
360 Hz 3 pole Bessel filter. 

10 Original sensor signal 42 is thus filtered using the 360 Hz low pass and is sampled at 2 kHz. 
The values are subsequently added and high pass-filtered at 2 Hz. The signal is then 
transmitted with a resolution of ± 480 LSB (least significant bit) (10 bit). Microcontroller jiC 
then internally has the possibility of drawing on the direct acceleration signal via a simple 
subtraction, which is signal 41. Depending on the threshold value, integrated sensor signal 40 

15 would result in a resolution at 100 LSB to 200 LSB approximately 7 ms to 9 ms or 2 ms to 5 
ms after the acceleration occurred. The original sensor signal may be reconstructed quite 
well, at least in the trigger-relevant part of the signal. High pass filtering subsequently results 
in a slight offset. High pass filtering is necessary to filter away slight sensor offset drifts. 
High pass filtering was checked based on driving on gravel. Figure 5 shows the result. A 

20 signal/time diagram is also shown here in which again the time is indicated on the abscissa 
and arbitrary units for the signal are indicated on the ordinate. Curve 50 shows the integrated 
acceleration signal without high pass filtering, curve 5 1 shows the integrated signal with high 
pass filtering, and curve 52 shows the acceleration signal after low pass filtering. Curve 50 
shows that, without high pass filtering, trigger-relevant signals would be generated due to the 

25 fact that the sensor's offset drift is disregarded, while with high pass filtering no trigger- 
relevant signals are generated, even during this drive on gravel. 
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